Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

PyPI
discord-react 0.0.0.1, 0.0.0.2, 0.0.1
MAL-2024-9968 reversing-labs, ossf-package-analysis

May 25, 2024
PyPI
testpkg3322 2.35.8
MAL-2024-1365 ossf-package-analysis

May 14, 2024
PyPI
multiconnections 2.34.23, 2.35.1, 2.35.4, 2.35.7, 2.35.5
MAL-2024-1334 ossf-package-analysis

May 6, 2024
PyPI
threadxpools 1.2, 1.0
MAL-2024-1333 ossf-package-analysis

May 5, 2024
PyPI
reqargs 1.4, 1.2, 1.3
MAL-2024-1254 ossf-package-analysis

Apr 11, 2024
PyPI
lyft-core 999.3.9
MAL-2024-1202 ossf-package-analysis

Apr 4, 2024
PyPI
sparklog 0.0.3
MAL-2024-1185 ossf-package-analysis

Mar 27, 2024
PyPI
types-for-adobe 99.3.9, 99.4.0
MAL-2024-1186 ossf-package-analysis

Mar 27, 2024
PyPI
google-requests 99.3.9
MAL-2024-1144 ossf-package-analysis

Mar 24, 2024
PyPI
lyft-service 9.99.1
MAL-2024-1142 ossf-package-analysis

Mar 23, 2024
PyPI
business-kpi-manager 5.9.1
MAL-2024-1111 ossf-package-analysis

Mar 18, 2024
PyPI
cert-orchestration-adapter 5.9.1
MAL-2024-1109 ossf-package-analysis

Mar 17, 2024
PyPI
mle-py-connector 5.9.1
MAL-2024-1108 ossf-package-analysis

Mar 17, 2024
PyPI
lyft-stats 5.9.1
MAL-2024-1106 ossf-package-analysis

Mar 17, 2024
PyPI
lyft-exceptions 5.9.1
MAL-2024-1104 ossf-package-analysis

Mar 17, 2024
PyPI
lyft-settings 5.9.1
MAL-2024-1105 ossf-package-analysis

Mar 17, 2024
PyPI
lyft-requests 5.9.1
MAL-2024-1103 ossf-package-analysis

Mar 17, 2024
PyPI
booto3 0.0.1
MAL-2024-1059 ossf-package-analysis

Mar 8, 2024
PyPI
pyalicet 0.0.3, 0.0.4
MAL-2024-1050 ossf-package-analysis

Mar 2, 2024
PyPI
djanggo 0.0.6, 0.0.8
MAL-2024-1036 ossf-package-analysis

Feb 23, 2024
PyPI
multicolored 1.0.0
MAL-2023-8765 ossf-package-analysis

Dec 25, 2023
PyPI
vibrant 1.0.0
MAL-2023-8770 ossf-package-analysis

Dec 25, 2023
PyPI
richcolor 1.0.0
MAL-2023-8769 ossf-package-analysis, kam193

Dec 25, 2023
PyPI
excaliburx 1.0.0
MAL-2023-8764 ossf-package-analysis, kam193

Dec 25, 2023
PyPI
enchantv 1.0.0
MAL-2023-8763 ossf-package-analysis, kam193

Dec 25, 2023
PyPI
newpackagetest2027 1.0.0
MAL-2023-8767 ossf-package-analysis, kam193

Dec 25, 2023
PyPI
newpackagetest2028 1.0.0
MAL-2023-8768 ossf-package-analysis, kam193

Dec 25, 2023
PyPI
newpackagetest2026 1.0.0
MAL-2023-8766 ossf-package-analysis, kam193

Dec 25, 2023
PyPI
azureml-contrib-daskonbatch 1.0.0
MAL-2023-8563 ossf-package-analysis

Nov 22, 2023
PyPI
yelp-cgeom1 0.1
MAL-2023-8564 ossf-package-analysis

Nov 22, 2023
PyPI
discomusic 0.0.3
MAL-2023-8540 ossf-package-analysis

Nov 18, 2023
PyPI
fbdebug 0.1
MAL-2023-8399 ossf-package-analysis

Oct 23, 2023
PyPI
tencent-cloud-python-sdk all versions
MAL-2023-8370 google-open-source-security 4 IOCs

Oct 13, 2023
PyPI
python-alibabacloud-tea-openapi all versions
MAL-2023-8363 google-open-source-security 4 IOCs

Oct 13, 2023
PyPI
python-alibabacloud-sdk-core all versions
MAL-2023-8362 google-open-source-security 4 IOCs

Oct 13, 2023
PyPI
enumerate-iam-aws all versions
MAL-2023-8361 google-open-source-security 4 IOCs

Oct 13, 2023
PyPI
aws-enumerate-iam all versions
MAL-2023-8359 google-open-source-security 4 IOCs

Oct 13, 2023
PyPI
alisdkcore all versions
MAL-2023-8355 google-open-source-security 4 IOCs

Oct 13, 2023
PyPI
alibabacloud-oss2 all versions
MAL-2023-8353 google-open-source-security 4 IOCs

Oct 13, 2023
PyPI
cephlib 0.0.2
MAL-2023-8310 ossf-package-analysis

Oct 9, 2023